Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/VnRfBxlbuhTeBL6PKQucn0tlg5E.roa
File: VnRfBxlbuhTeBL6PKQucn0tlg5E.roa (raw, json)
Hash identifier: Bph1wb62mDDxB2WbDQpJtXbJoKB9Ap/4aQdxK21GxNM=
Subject key identifier: 56:74:5F:07:19:5B:BA:14:DE:04:BE:8F:29:0B:9C:9F:4B:65:83:91
Certificate issuer: /CN=1685cdba5d7daf6ddccf8675a90a25b6ed6444d7
Certificate serial: 018331F78A74305C7B15A26D1A0EA526B049
Authority key identifier: 16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoXNul19r23cz4Z1qQoltu1kRNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/VnRfBxlbuhTeBL6PKQucn0tlg5E.roa
Signing time: Mon 12 Sep 2022 13:50:49 +0000
ROA not before: Mon 12 Sep 2022 13:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 91.199.253.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:f7:8a:74:30:5c:7b:15:a2:6d:1a:0e:a5:26:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1685cdba5d7daf6ddccf8675a90a25b6ed6444d7
Validity
Not Before: Sep 12 13:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56745f07195bba14de04be8f290b9c9f4b658391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:a9:46:59:ea:a8:a7:61:96:cd:de:9e:f5:
a9:03:3f:70:ad:bd:95:3e:e8:aa:e6:37:c2:d4:6f:
ca:0a:af:63:20:22:9a:95:ae:8c:29:e1:6c:9e:04:
d5:66:e4:7f:36:85:55:f5:16:f0:36:8d:b9:1b:74:
76:55:32:37:06:7c:c5:2a:dd:ca:5a:05:50:76:03:
a1:2e:c0:4a:02:68:43:01:a1:6f:00:43:e8:70:83:
a4:a0:ca:41:47:0d:8b:24:4f:25:19:3b:13:14:78:
ca:26:cd:5c:19:a3:f2:63:7a:e5:20:1d:fe:91:74:
8a:c8:67:d6:81:07:50:06:84:15:aa:12:df:60:1a:
74:9b:db:85:49:5f:58:7c:a8:f0:9b:22:2d:4a:da:
3a:f4:b7:09:20:b7:b5:ea:85:b1:9b:03:c7:4f:da:
4f:92:d4:9b:de:c6:1f:60:3c:88:16:16:15:66:85:
e6:60:7f:37:71:58:54:db:a9:e1:d1:f3:0c:db:0a:
f9:bd:8a:25:d5:96:ca:43:b0:a7:a1:3a:f5:1c:d3:
4e:29:99:5e:b2:ee:cc:44:e7:f3:a9:5d:f0:aa:95:
88:07:fe:00:0c:71:83:2b:d0:cd:52:66:48:7c:8e:
5a:de:89:3c:f7:e1:d9:de:75:33:89:e0:23:01:24:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:5F:07:19:5B:BA:14:DE:04:BE:8F:29:0B:9C:9F:4B:65:83:91
X509v3 Authority Key Identifier:
keyid:16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoXNul19r23cz4Z1qQoltu1kRNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/VnRfBxlbuhTeBL6PKQucn0tlg5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/FoXNul19r23cz4Z1qQoltu1kRNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e8:dc:26:80:b6:c1:81:fa:78:cd:62:07:7e:f5:20:c2:25:
56:da:0f:20:40:24:36:5a:ca:cc:d0:e9:1a:a2:f2:b2:90:16:
8d:eb:a3:15:e9:b3:89:be:6f:73:39:3c:b9:7a:01:52:af:19:
8a:e7:e5:34:12:93:19:0b:e6:5f:7a:61:bd:73:50:b1:90:09:
52:df:54:6e:32:f3:15:aa:7d:4b:02:d6:55:d7:05:f8:fd:f4:
b0:dc:43:75:7c:54:b2:00:d8:ec:ca:43:96:00:35:bd:39:6c:
75:3e:34:d8:42:47:0d:0f:cd:f3:50:30:2d:4a:3d:cb:8d:54:
f3:81:55:40:e8:15:52:92:f3:77:cc:7d:f5:70:a8:e3:48:a3:
68:22:a8:26:3a:e1:cb:01:7c:d4:87:4e:8f:ef:c6:c7:f9:d7:
77:1f:ae:86:14:e3:c5:56:9a:c1:14:5b:50:4e:02:6e:79:fd:
be:6b:70:05:cc:78:70:12:2c:a0:1d:81:2c:7c:48:0e:4c:7d:
c8:92:04:f9:2b:d6:16:ca:10:57:2e:0e:21:72:8c:7c:04:87:
e4:9f:8a:69:5b:8a:b2:70:37:ba:76:ab:d1:26:1a:ca:96:d3:
da:9c:32:d4:bd:89:af:2b:9e:eb:73:f6:bc:a7:fe:ab:a4:57:
10:97:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:52 2025 by rpki-client